Er7206 Firmware
by TP-Link
CVEs (14)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-7851 | Cri | 0.64 | 9.8 | 0.01 | Oct 21, 2025 | An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways. | ||
| CVE-2025-6542 | Cri | 0.64 | 9.8 | 0.01 | Oct 21, 2025 | An arbitrary OS command may be executed on the product by a remote unauthenticated attacker. | ||
| CVE-2025-6541 | Hig | 0.57 | 8.8 | 0.01 | Oct 21, 2025 | An arbitrary OS command may be executed on the product by the user who can log in to the web management interface. | ||
| CVE-2025-7850 | Hig | 0.47 | 7.2 | 0.02 | Oct 21, 2025 | A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways. | ||
| CVE-2024-21827 | Hig | 0.47 | 7.2 | 0.01 | Jun 25, 2024 | A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of… | ||
| CVE-2023-47618 | Hig | 0.47 | 7.2 | 0.02 | Feb 6, 2024 | A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an… | ||
| CVE-2023-47617 | Hig | 0.47 | 7.2 | 0.03 | Feb 6, 2024 | A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an… | ||
| CVE-2023-47209 | Hig | 0.47 | 7.2 | 0.03 | Feb 6, 2024 | A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an… | ||
| CVE-2023-47167 | Hig | 0.47 | 7.2 | 0.03 | Feb 6, 2024 | A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated… | ||
| CVE-2023-46683 | Hig | 0.47 | 7.2 | 0.03 | Feb 6, 2024 | A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection . An attacker can… | ||
| CVE-2023-43482 | Hig | 0.47 | 7.2 | 0.03 | Feb 6, 2024 | A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to… | ||
| CVE-2023-42664 | Hig | 0.47 | 7.2 | 0.03 | Feb 6, 2024 | A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an… | ||
| CVE-2023-36498 | Hig | 0.47 | 7.2 | 0.03 | Feb 6, 2024 | A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an… | ||
| CVE-2025-9290 | Med | 0.38 | 5.9 | 0.00 | Jan 23, 2026 | An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge… |
- risk 0.64cvss 9.8epss 0.01
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
- risk 0.64cvss 9.8epss 0.01
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
- risk 0.57cvss 8.8epss 0.01
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
- risk 0.47cvss 7.2epss 0.02
A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
- risk 0.47cvss 7.2epss 0.01
A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of…
- risk 0.47cvss 7.2epss 0.02
A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an…
- risk 0.47cvss 7.2epss 0.03
A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an…
- risk 0.47cvss 7.2epss 0.03
A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an…
- risk 0.47cvss 7.2epss 0.03
A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated…
- risk 0.47cvss 7.2epss 0.03
A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection . An attacker can…
- risk 0.47cvss 7.2epss 0.03
A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to…
- risk 0.47cvss 7.2epss 0.03
A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an…
- risk 0.47cvss 7.2epss 0.03
A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an…
- risk 0.38cvss 5.9epss 0.00
An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge…